Lucene search

Samsung MobileCVELIST:CVE-2022-39878

HistoryOct 07, 2022 - 12:00 a.m.

CVE-2022-39878

2022-10-0700:00:00

CWE-284

Samsung Mobile

www.cve.org

samsung checkout

access control

vulnerability

implicit intent broadcast

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

5.6

Confidence

High

EPSS

Percentile

5.1%

JSON

Improper access control vulnerability in Samsung Checkout prior to version 5.0.55.3 allows attackers to access sensitive information via implicit intent broadcast.

CNA Affected

[
  {
    "vendor": "Samsung Mobile",
    "product": "Samsung Checkout",
    "versions": [
      {
        "version": "unspecified",
        "status": "affected",
        "lessThan": "5.0.55.3",
        "versionType": "custom"
      }
    ]
  }
]

References

security.samsungmobile.com/serviceWeb.smsb?year=2022&month=10

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

5.6

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for CVELIST:CVE-2022-39878